Security Assessment and Recommendations – Phase I

Submitted to: Farhan Farrukh
SE571 Principles of Information Security and Privacy
Keller Graduate School of Management
Submitted: March 18, 2012

Table of Contents

Company Overview 1
Security Vulnerabilities 1
Policy Vulnerability 1
Hardware Vulnerability 2

Company Overview

With three sites strategically located for global reach, headquarters in San Diego, California, The Defense Division (DD) in Santa Ana, California, and the Commercial Division (CD) 40 miles east of San Diego County, Aircraft Solutions has developed a dedicated and trained work force focused on providing its customers in the electronic, commercial, defense, and aerospace industry with great design and fabrication of component products and services. The mission of Aircraft Solutions is to provide customer success through machined products and related services, and to meet cost, quality, and schedule requirements. The company’s strategy is to offer low-cost design and computer-aided modeling packages to customers to reduce their development expenses.
Two Security Vulnerabilities

Policy Vulnerability
One of the major threats Aircraft Solution’s systems faces, under its current configuration, is its data vulnerability to unauthorized access. Data is consistently being accessed and modified by people such as employees, customers, suppliers, and contractors through the company network from remote locations, which requires data to travel from one location to another through the Internet without being protected once is out of the company’s firewall. Currently, the system administrators, which are members of the information technology (IT) group, are responsible for the security and confidentiality of proprietary information; however, the company does not